Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/05C7EBF651FF11EEB8BAFC5AC4F9AE02.roa
File: 05C7EBF651FF11EEB8BAFC5AC4F9AE02.roa (raw, json)
Hash identifier: 0ogJgHFdLTuLIQkknr/Ct9hV9yLAZHcrhkuoBTM3AAs=
Subject key identifier: 4C:00:EC:6A:82:CA:6B:C9:8C:64:19:7E:13:22:CE:9A:77:88:BF:A1
Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial: 0710
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/05C7EBF651FF11EEB8BAFC5AC4F9AE02.roa
Signing time: Wed 13 Sep 2023 06:30:25 +0000
ROA not before: Wed 13 Sep 2023 06:30:25 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 150744
IP address blocks: 103.138.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Validity
Not Before: Sep 13 06:30:25 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65015701-508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:29:03:0a:c3:ed:91:70:e4:a8:7f:d9:19:
d1:5f:b6:b7:c0:cb:cd:87:d6:65:20:be:ba:51:6d:
dc:a7:b3:c6:6c:78:22:38:5f:28:3a:fa:57:d8:5c:
51:7e:5f:d7:6c:bf:d5:81:84:76:6d:62:0b:0a:d2:
78:aa:1b:41:3a:a7:0b:93:34:fe:00:a3:47:27:bf:
32:51:ed:23:df:79:b7:5c:05:67:0d:b0:c7:12:cc:
47:3c:0f:5c:c6:38:14:4b:71:60:2b:5d:7d:6b:35:
ae:16:3c:90:40:14:9f:56:d5:58:7e:a2:0f:01:0a:
39:5c:fd:e9:62:69:7f:f2:88:5e:d8:78:f9:c9:77:
98:51:17:b8:48:de:79:ef:d3:a6:69:d8:ae:03:70:
75:aa:5c:e4:8f:d3:8a:00:99:9c:a4:90:56:5c:eb:
7b:c6:4d:61:66:4c:47:7a:66:0a:9f:a4:f0:c4:82:
82:71:c5:5b:cd:fc:d0:7c:97:d2:3f:5e:15:33:56:
08:f5:63:e1:24:6d:99:e1:d9:4e:9d:aa:ff:99:cb:
bf:be:d8:12:91:b4:86:ff:8e:72:46:ef:bc:ba:68:
84:ce:a9:53:2f:68:9f:05:df:55:58:75:0c:5d:01:
27:19:e9:de:1f:03:36:dd:f4:64:3c:a6:90:00:40:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:EC:6A:82:CA:6B:C9:8C:64:19:7E:13:22:CE:9A:77:88:BF:A1
X509v3 Authority Key Identifier:
keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/05C7EBF651FF11EEB8BAFC5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a4:50:9b:16:12:7e:b1:44:cc:ae:f4:f3:45:08:e6:50:8e:
ab:22:57:f9:84:81:6b:c0:e4:9b:6a:58:15:e6:1c:3c:d8:53:
ba:b5:a7:2b:6d:e8:88:25:37:6f:22:9f:44:b3:59:ee:b6:de:
52:9b:06:d2:ce:17:39:1d:85:76:eb:19:af:33:6e:44:85:20:
77:30:b9:69:49:7e:ff:e8:06:a5:0d:b3:db:70:fd:d5:df:68:
c5:69:5d:c1:4c:4e:57:76:60:27:01:02:04:a8:16:56:62:cb:
86:f8:75:ac:8c:d3:69:21:55:dd:01:0e:cc:05:44:3a:8b:d9:
08:1b:e0:b5:a2:53:5e:6f:f9:2b:3d:89:0e:21:c5:ed:77:e4:
7b:14:ca:6a:77:68:a0:61:ba:95:00:c1:0c:a6:36:3a:f0:1e:
e4:b7:33:e9:cc:91:5e:d3:18:41:d2:73:15:82:a6:56:b3:35:
2f:a0:f9:b4:72:6d:24:1d:d2:6c:a7:95:ff:db:6b:3f:83:30:
c4:92:38:2c:64:c7:7d:6d:9c:39:c1:0e:a1:a7:69:98:cb:2f:
5e:03:b4:21:3a:cf:74:2c:e1:79:2a:4f:67:4f:33:69:a4:27:
e4:9e:6f:68:e9:6f:6e:bf:7c:fe:9b:81:ec:1e:2f:b3:be:52:
2e:59:b5:55
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD
OEY1RDMzMDIwHhcNMjMwOTEzMDYzMDI1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTAxNTcwMS01MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo7UpAwrD7ZFw5Kh/2RnRX7a3wMvNh9ZlIL66UW3cp7PGbHgiOF8oOvpX2FxR
fl/XbL/VgYR2bWILCtJ4qhtBOqcLkzT+AKNHJ78yUe0j33m3XAVnDbDHEsxHPA9c
xjgUS3FgK119azWuFjyQQBSfVtVYfqIPAQo5XP3pYml/8ohe2Hj5yXeYURe4SN55
79OmadiuA3B1qlzkj9OKAJmcpJBWXOt7xk1hZkxHemYKn6TwxIKCccVbzfzQfJfS
P14VM1YI9WPhJG2Z4dlOnar/mcu/vtgSkbSG/45yRu+8umiEzqlTL2ifBd9VWHUM
XQEnGeneHwM23fRkPKaQAEAavQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEwA7GqC
ymvJjGQZfhMizpp3iL+hMB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG
MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjNDQTQvMTVGNjhCNUNDRjE5MTFFQUFFRjYwQjFFQzRGOUFFMDIvMDVDN0VCRjY1
MUZGMTFFRUI4QkFGQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnitcwDQYJKoZIhvcNAQELBQADggEBAFykUJsWEn6xRMyu
9PNFCOZQjqsiV/mEgWvA5JtqWBXmHDzYU7q1pytt6IglN28in0SzWe623lKbBtLO
FzkdhXbrGa8zbkSFIHcwuWlJfv/oBqUNs9tw/dXfaMVpXcFMTld2YCcBAgSoFlZi
y4b4dayM02khVd0BDswFRDqL2Qgb4LWiU15v+Ss9iQ4hxe135HsUymp3aKBhupUA
wQymNjrwHuS3M+nMkV7TGEHScxWCplazNS+g+bRybSQd0mynlf/baz+DMMSSOCxk
x31tnDnBDqGnaZjLL14DtCE6z3Qs4XkqT2dPM2mkJ+Seb2jpb26/fP6bgeweL7O+
Ui5ZtVU=
-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:36 2024 by rpki-client on console-fra.rpki-client.org